No flag in index.php
look closer at the source code of the website when you got the index.php contents
Instead of the flag i got $flag = "".file_get_contents(".passwd")."";
i got the same result $flag = "".file_get_contents(".passwd")."";
Challenge done